Lulu – Mac open-source firewall that aims to block unknown outgoing connections

Re:Lulu – Mac open-source firewall that aims to block unknow... by joshspankit on Tuesday January 12, 2021 @08:31AM (#25746559)

The first firewall to do this should definitely lead with that in the headline.

[ Parent | on HN ]

Re:Lulu – Mac open-source firewall that aims to block unknow... by joshspankit on Tuesday January 12, 2021 @11:15AM (#25748850)

Downvote? I'm confused. This whole "Apple gets to bypass firewalls" thing is IMO a huge deal.

Whoever figures out how to make a system-wide firewall that can block everything including "unblockable" Apple network traffic likely deserves (again: IMO) all the attention we can give them.

[ Parent | on HN ]

Re:Lulu – Mac open-source firewall that aims to block unknow... by _rend on Tuesday January 12, 2021 @12:32PM (#25750165)

This already exists. Apple processes can bypass app-specific filters (NEFilterDataProvider), but not system-wide firewalls (like the built-in BPF), VPN configurations, etc.

[ Parent | on HN ]

Re:Lulu – Mac open-source firewall that aims to block unknow... by joshspankit on Tuesday January 12, 2021 @11:45PM (#25758258)

I’m marking this to remind myself to update my research. If anyone has references they are appreciated.

[ Parent | on HN ]

Re:Lulu – Mac open-source firewall that aims to block unknow... by m463 on Tuesday January 12, 2021 @04:56PM (#25754441)

I thought they DID bypass vpn connections.

Also, apple will routinely clear your pf rules when installing stuff.

[ Parent | on HN ]

Re:Lulu – Mac open-source firewall that aims to block unknow... by _rend on Tuesday January 12, 2021 @09:47PM (#25757379)

No, they only avoid being filtered by per-process filters. They can't bypass packet filters, by design; system-wide VPN connections work the same way, and cannot be bypassed.

[ Parent | on HN ]